sudo ausearch -m avc -ts today